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CLAIMS 



What is claimed is: 



1 . A method of communicating data from a low security assurance source to a high 
security assurance destination comprising: 
5 receiving data from a low security assurance source according to 

a communication protocol and transferring the data to a high security 
assurance destination according to the communication protocol; 

receiving a high end acknowledgment according to the 
communication protocol from the high security assurance destination; 
10 generating an acknowledgment trigger signal in response to the 

high end acknowledgment; and 

generating a low end acknowledgment according to the 
communication protocol in response to the acknowledgment trigger 
signal. 



15 2. The method of claim 1 further comprising: 

determining whether to generate an acknowledgment trigger 

signal 



3. The method of claim 2 wherein determining whether to generate the 
acknowledgment trigger signal comprises: 
20 determining whether the high end acknowledgment includes 

information data; and 

generating no acknowledgment trigger signal if information data 
is included in the high end acknowledgment. 
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The method of claim 2 wherein determining whether to generate the 
acknowledgment trigger signal comprises: 

determining whether the low security assurance source is 
authorized to receive acknowledgments; and 

generating no acknowledgment trigger signal if the low security 
assurance source is not authorized. 

The method of claim 1 further comprising: 

delaying the acknowledgment trigger signal in order to delay 
generation of the low end acknowledgment. 

The method of claim 1 wherein the acknowledgment trigger signal includes 
header data for generating the low end acknowledgment. 

The method of claim 6 further comprising: 

generating the low end acknowledgment from an 
acknowledgment template; and 

populating the low end acknowledgment with the header data 
from the acknowledgment trigger signal 

The method of claim 1 wherein the acknowledgment trigger signal is an binary 
enable signal. 

The method of claim 8 further comprising: 

tracking a sequence of plural data transmission units transferred 
to the high security assurance destination; and 

generating the acknowledgment trigger signal if the received high 
end acknowledgment corresponds to a next unacknowledged data 
transmission unit in the tracked sequence. 
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The method of claim 8 further comprising: 

tracking multiple sequences of plural data transmission units 
transferred to the high security assurance destination; 

referencing one of the tracked sequences that corresponds to a 
time interval in which the high end acknowledgment is received; and 

generating the acknowledgment trigger signal if the received high 
end acknowledgment corresponds to a next unacknowledged data 
transmission unit in the referenced sequence. 

The method of claim 8 further comprising: 

tracking header data for each data transmission unit in a sequence 
of plural data transmission units transferred to the high security 
assurance destination; 

generating the low end acknowledgment from an 
acknowledgment template in response to the acknowledgment trigger 
signal; and 

populating the low end acknowledgment with the header data for 
a next unacknowledged data transmission unit in the sequence. 

The method of claim 8 further comprising: 

tracking header data for multiple sequences of plural data 
transmission units transferred to the high security assurance destination; 

generating the low end acknowledgment from an 
acknowledgment template in response to the acknowledgment trigger 
signal; 

referencing the header data of one of the tracked sequences that 
corresponds to a time interval in which the acknowledgment trigger 
signal is received; and 
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populating the low end acknowledgment with the header data for 
a next unacknowledged data transmission unit in the referenced 
sequence. 

A system for communicating data from a low security assurance source to a high 
security assurance destination comprising: 

a first communication interface receiving data from a low security 
assurance source according to a communication protocol and transferring 
the data to a high security assurance destination according to the 
communication protocol; 

a second communication interface receiving a high end 
acknowledgment according to the communication protocol from the high 
security assurance destination; 

an acknowledgment trigger generating an acknowledgment 
trigger signal in response to the high end acknowledgment; and 

an acknowledgment generator generating a low end 
acknowledgment according to the communication protocol in response to 
the acknowledgment trigger signal. 

14. The system of claim 13 wherein the acknowledgment trigger determines whether 
to generate an acknowledgment trigger signal. 

20 15. The system of claim 14 wherein the acknowledgment trigger determines whether 
the high end acknowledgment includes information data and generates no 
acknowledgment trigger signal if information data is included in the high end 
acknowledgment. 
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16. The system of claim 14 wherein the acknowledgment trigger further comprises: 
an authorization list identifying low security assurance sources 
that are authorized to receive low end acknowledgments; 

the authorization list being referenced to determine whether an 
5 intended recipient of the high end acknowledgment is authorized to 

receive acknowledgments; and 

the acknowledgment trigger generating no acknowledgment 
trigger signal if the low security assurance source is not identified in the 
authorization list. 



10 17. The system of claim 1 3 wherein the acknowledgment trigger further comprises: 
a delay that delays the acknowledgment trigger signal for a 
random time period in order to delay generation of the low end 
acknowledgment. 



18. The system of claim 13 wherein the acknowledgment trigger signal includes 
1 5 header data for generating the low end acknowledgment. 

19. The system of claim 18 wherein the acknowledgment generator generates the 
low end acknowledgment from an acknowledgment template and populates the 
low end acknowledgment with the header data from the acknowledgment trigger 
signal. 



20 20. 



The system of claim 13 wherein the acknowledgment trigger signal is a binary 
enable signal. 
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The system of claim 20 wherein the acknowledgment trigger further comprises: 

a sequence list that tracks a sequence of plural data transmission 
units transferred to the high security assurance destination; 

the sequence list being referenced to determine whether the 
received high end acknowledgment corresponds to a next 
unacknowledged data transmission unit in the tracked sequence; and 

the acknowledgment trigger generating the trigger signal if the 
received high end acknowledgment corresponds to the next 
unacknowledged data transmission unit in the referenced sequence list. 

The system of claim 20 wherein the acknowledgment trigger further comprises: 

plural sequence lists that tracks multiple sequences of plural data 
transmission units transferred to the high security assurance destination; 

one of the plural sequence lists being referenced that corresponds 
to a time interval in which the high end acknowledgment is received; and 

the acknowledgment trigger generating the acknowledgment 
trigger signal if the received high end acknowledgment corresponds to a 
next unacknowledged data transmission unit in the referenced sequence 
list. 

23. The system of claim 20 wherein the acknowledgment generator further 
20 comprises: 

a header data list that tracks header data for each data 
transmission unit in a sequence of plural data transmission units 
transferred to the high security assurance destination; 

the acknowledgment generator generates the low end 
25 acknowledgment from an acknowledgment template in response to the 

acknowledgment trigger signal; and 
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the acknowledgment generator populates the low end 
acknowledgment with the header data from the header data list for a next 
unacknowledged data transmission unit in the sequence. 

The system of claim 20 wherein the acknowledgment generator further 
comprises: 

plural header data lists that tracks header data for multiple 
sequences of plural data transmission units transferred to the high 
security assurance destination; 

the acknowledgment generator generates the low end 
acknowledgment from an acknowledgment template in response to the 
acknowledgment trigger signal; 

one of the plural header data lists that corresponds to a time 
interval in which the acknowledgment trigger signal is received being 
referenced for header data of one of the tracked sequences; and 

the acknowledgment generator populates the low end 
acknowledgment with the header data from the referenced header data 
list for a next unacknowledged data transmission unit in the sequence. 

A system for communicating data from a low security assurance source to a high 
security assurance destination comprising: 

means for receiving data from a low security assurance source 
according to a communication protocol and transferring the data to a high 
security assurance destination according to the communication protocol; 

means for receiving a high end acknowledgment according to the 
communication protocol from the high security assurance destination; 

means for generating an acknowledgment trigger signal in 
response to the high end acknowledgment; and 
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means for generating a low end acknowledgment according to the 
communication protocol in response to the acknowledgment trigger 
signal. 

26. The method of claim 1 wherein the communication protocol is an 
5 acknowledgment based communication protocol. 

27. The method of claim 1 wherein the acknowledgment based communication 
protocol is a handshaking protocol. 

28. The method of claim 1 wherein the high security assurance destination is a 
software process. 

10 29. The system of claim 13 wherein the first and second communication interfaces 
are network interfaces. 

30. The system of claim 13 wherein the first and second communication interfaces 
are software communication interfaces. 

3 1 . The system of claim 1 3 wherein the high security assurance destination is a 
1 5 software process. 

32. The system of claim 13 wherein the system is a network device. 

33. The system of claim 13 wherein the system is an output port. 



34. The system of claim 13 wherein the system is an embedded software component. 



